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In this work we design and implement ESCORT, a backward compatible, efficient, and secure 
access control system, to facilitate mobile wireless access to secured wireless LANs. In mobile 
environments, a mobile guest may frequently roam into foreign domains while demanding 
critical network services. ESCORT provides instant yet secure access to the mobile guest 
based on the concept of "escort", which refers to a special network object with four distinct 
properties: (1) T ... 
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The IEEE 802.15.4 specification outlines a new class of wireless radios and protocols targeted 
at low power devices, personal area networks, and sensor nodes. The specification includes a 
number of security provisions and options. In this paper, we highlight places where 
application designers and radio designers should exercise care when implementing and using 
802.15.4 devices. Specifically, some of the 802.15.4 optional features actually reduce 
security, so we urge implementors to ignore those ... 
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In this paper, we present a pra ctical key recovery attack on WEP, the link-layer security 
protocol for 802.11 b wireless networks. The attack is based on a partial key exposure 
vulnerability in the RC4 stream cipher discovered by Fluhrer, Mantin, and Shamir. This paper 
describes how to apply this flaw to breaking WEP, our implementation of the attack, and 
optimizations that can be used to reduce the number o f packets required for the attack. We 
conclude that the 802.11b WEP standard is completely ... 
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Medium access control for wireless sensor networks has been a very active research area for 
the past couple of years. The sensor networks literature presents an al phabet soup of 
medium access control protocols with almost all of the works focusing only on energy 
efficiency. There is much more innovative work to be done at the MAC layer, but current 
efforts are not addressing the hard unsolved problems. Majority of the works appearing in the 
literature are "least publishable incremental improveme ... 
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Cryptographic algorithms play an important role in the security architecture of wireless sensor 
networks (WSNs). Choosing the most storage- and energy-efficient block cipher is essential, 
due to the facts that these networks are meant to operate without human intervention for a 
long period of time with little energy supply, and tha t available storage is scarce on these 
sensor nodes. However, to our knowledge, no systematic work has been done in this area so 
far. We construct an evaluation framew ... 
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The performance of Wireless Local Area Networks (WLANs)often suffers from link-layer frame 
losses caused by noise, interference, multipath, attenuation, and user mobility. We observe 
that frame losses often occur in bursts and that three of the five main causes of frame losses 
— multipath, attenuation, mobility-depends on the tra nsmission path traversed between an 
access point (AP)and a client station. In a typical WLAN deployment, different transmission 
paths to a client exist in places where ... 
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The 802.11 standard for wireless networks includes a Wired Equivalent Privacy (WEP) 
protocol, used to protect li nk-layer communications from eavesdropping and other attacks. 
We have discovered several serious security flaws in the protocol, stemming from mis- 
application of cryptographic primitives. The flaws lead to a number of practical attacks that 
demonstrate that WEP fails to achieve its security goals. In this paper, we discuss in detail, 
each of the flaws, the underlyi ng security princip ... 
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In a public WLAN hotspot, a roaming mobile terminal (MT) may be within radio range of more 
than one access point (AP), each of which may or may not have roaming agreements with the 
service provider of the user of the MT. In this case, the MT may need to discover some 
<i>service information</i> before it can make an intelligent <i>network-selection</i> 
decision. The most critical is <i>roaming information</i>; while other information such as 
<i>security policies< ... 
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This paper presents a new pai ring protocol that allows two CPU-constrained wireless devices 
Alice and Bob to esta blish a shared secret at a very low cost. To our knowledge, this is the 
first software pairing scheme that does not rely on expensive public-key cryptography, out-of- 
band channels (such as a keyboard or a display) or specific hardware, making it inexpensive 
and suitable for CPU-constrained devices such as sensors. 

In the described protocol, Alice can send the sec re ... 
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